parse

Parse and inspect local certificate and key files. Decodes PEM and PFX/PKCS#12 files and pretty-prints their contents.

Usage

r4t parse <subcommand> <file> [flags]

Subcommands

`parse pem`

Decode and display a PEM-encoded certificate or certificate chain.

# Parse a PEM certificate
r4t parse pem /tmp/user.crt

# Parse a PEM file with a separate private key
r4t parse pem /tmp/user.crt --key /tmp/user.key

# Parse a PEM that contains the full chain (cert + intermediates + key)
r4t parse pem /tmp/chain.pem

Flag	Short	Description
`--key`	`-k`	Path to a separate PEM private key file

Displays:

Subject and Issuer DNs
Serial number
Validity period (Not Before / Not After)
Subject Alternative Names (DNS, IP, UPN, Email)
Extended Key Usage (EKU) OIDs
Key usage flags
CA flag and path length constraint
Whether a private key is present

`parse pfx`

Decode and display a PKCS#12 / PFX file.

# Parse a PFX with no password
r4t parse pfx /tmp/user.pfx

# Parse a PFX with a password
r4t parse pfx /tmp/user.pfx --password 'P@ssword1'

# Parse a non-standard PFX (legacy mode)
r4t parse pfx /tmp/legacy.pfx --legacy

Flag	Short	Description
`--password`	`-p`	Password for the PFX file (leave empty for passwordless)
`--legacy`	—	Use legacy decode mode for non-standard / older PFX files

Displays:

All certificates in the PFX (leaf + chain)
Private key presence and type
Subject and Issuer for each certificate
SANs, EKUs, and validity for each certificate
Friendly names and bag attributes

Use Cases

# Verify a certificate obtained via adcs req
r4t parse pfx /tmp/admin.pfx

# Check the UPN SAN in a certificate before using it for PKINIT
r4t parse pem /tmp/user.crt

# Inspect a certificate from a stored credential
r4t creds list --auth  # note the pfx_file path
r4t parse pfx /path/from/creds/list